This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer (raw, json) Hash identifier: pv3jxf1DwIp0qWeoj8r95AuztVxV5CBjgs/NmVan178= Subject key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38A3D18315B5A8F07F43CB8D6FC26D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 1895 IP: 131.188.0.0/16 IP: 192.44.81.0 -- 192.44.90.255 IP: 192.129.10.0 -- 192.129.14.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a3:d1:83:15:b5:a8:f0:7f:43:cb:8d:6f:c2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:93:52:47:73:49:3c:6c:d6:dd:42:fe:53: 95:ab:c2:e8:86:a0:c7:ee:a4:1e:cb:35:d6:4c:86: d7:c3:33:a9:e3:8a:f4:0a:b1:84:b4:10:b5:08:77: fd:b1:1d:1c:65:fc:6e:42:8c:e6:81:18:8e:5f:3c: 1e:83:29:6e:c5:69:78:8a:bc:74:a0:d6:0d:7e:ad: bd:37:57:7c:b5:9a:4d:a4:74:65:e5:9e:ca:25:5e: 15:8b:73:24:4c:1b:33:bb:8f:c3:4a:6d:dc:38:18: 40:30:0b:79:ec:70:f3:2b:30:03:ae:19:5f:d3:88: f0:a7:3f:d8:80:61:bb:db:c5:04:12:00:ec:79:6e: ba:74:e3:bd:d7:a3:ae:65:f0:db:69:6a:6e:fb:24: 3e:62:5f:62:a6:e3:da:ed:f7:f0:34:39:69:6d:d7: 6a:24:b7:ec:f9:33:c4:22:e5:fe:85:5d:02:f9:c2: ff:77:24:e8:9b:43:01:5f:40:1c:2d:b6:83:17:d4: 81:8d:c9:92:9b:c9:12:fb:63:47:74:dd:34:55:e6: 24:60:27:ff:ef:1d:4e:a1:84:91:68:32:86:ce:70: 9d:89:0f:62:ab:31:33:64:a9:f0:66:dd:aa:9e:05: ba:09:f7:66:55:d3:80:4a:9d:98:c0:d4:b7:92:83: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.188.0.0/16 192.44.81.0-192.44.90.255 192.129.10.0-192.129.14.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1895 Signature Algorithm: sha256WithRSAEncryption 05:9f:6f:f0:a2:df:a8:00:54:6f:78:03:f9:16:ee:81:c4:ec: ce:f7:83:de:43:19:37:00:b3:1a:18:d0:ea:78:89:c2:43:32: e4:93:03:97:62:8b:b0:95:ca:17:86:ea:7f:e9:b0:d5:63:74: 22:28:5f:05:aa:f7:63:1e:1f:6c:bf:85:3f:80:05:ba:dd:c9: 36:3d:5c:2f:ff:cf:f2:8c:a8:2d:cc:b3:1b:e2:77:5e:2d:f9: 27:b5:38:a1:d0:e1:0d:3a:5f:b4:ab:8e:a9:4f:f9:ab:3c:eb: 06:bc:8f:36:f0:e5:bc:52:5f:0c:a8:17:f4:03:ee:ac:b1:12: ce:bd:56:71:db:2f:25:6b:9c:35:60:15:d2:fc:93:3e:87:76: e7:84:5e:9d:e5:3b:fc:99:9d:3e:5b:d6:ea:40:72:38:ab:e8: a4:01:4d:8d:98:6b:a1:c3:a6:80:4c:c0:02:53:1d:60:83:4f: ae:72:de:ba:14:fa:17:7a:7f:54:09:62:29:27:f1:42:ce:88: a4:c6:0c:20:7e:3d:1a:50:8b:4b:2b:c6:67:09:01:72:73:57: 76:6e:43:2b:a5:4b:ee:71:8f:68:45:40:6a:59:47:a7:b3:1a: 05:e9:e5:0e:ec:bf:c5:c0:85:6f:09:4e:95:d7:44:b8:37:6e: f3:0e:af:b0 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt+OKPRgxW1qPB/Q8uNb8JtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGI0OWJhZjE3ZjA2YzM2NGEwMGY4ZTY0Yzg5MWM1MzcyOWY3YTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstOTUkdzSTxs1t1C/lOVq8LohqDH 7qQeyzXWTIbXwzOp44r0CrGEtBC1CHf9sR0cZfxuQozmgRiOXzwegyluxWl4irx0 oNYNfq29N1d8tZpNpHRl5Z7KJV4Vi3MkTBszu4/DSm3cOBhAMAt57HDzKzADrhlf 04jwpz/YgGG728UEEgDseW66dOO916OuZfDbaWpu+yQ+Yl9ipuPa7ffwNDlpbddq JLfs+TPEIuX+hV0C+cL/dyTom0MBX0AcLbaDF9SBjcmSm8kS+2NHdN00VeYkYCf/ 7x1OoYSRaDKGznCdiQ9iqzEzZKnwZt2qngW6CfdmVdOASp2YwNS3koPcGwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFI20m68X8Gw2SgD45kyJHFNyn3ovMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzljMWVj OC1jYzM5LTQzODktODU4NC04NTE3M2U1N2ViNTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvOWMxZWM4 LWNjMzktNDM4OS04NTg0LTg1MTczZTU3ZWI1Mi8xL2piU2JyeGZ3YkRaS0FQam1U SWtjVTNLZmVpOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAnBAIAATAhAwMAg7wwDAMEAMAsUQMEAMAsWjAMAwQBwIEKAwQA wIEOMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAgdnMA0GCSqGSIb3DQEBCwUAA4IB AQAFn2/wot+oAFRveAP5Fu6BxOzO94PeQxk3ALMaGNDqeInCQzLkkwOXYouwlcoX hup/6bDVY3QiKF8FqvdjHh9sv4U/gAW63ck2PVwv/8/yjKgtzLMb4ndeLfkntTih 0OENOl+0q46pT/mrPOsGvI828OW8Ul8MqBf0A+6ssRLOvVZx2y8la5w1YBXS/JM+ h3bnhF6d5Tv8mZ0+W9bqQHI4q+ikAU2NmGuhw6aATMACUx1gg0+uct66FPoXen9U CWIpJ/FCzoikxgwgfj0aUItLK8ZnCQFyc1d2bkMrpUvucY9oRUBqWUensxoF6eUO 7L/FwIVvCU6V10S4N27zDq+w -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:09 2026 by rpki-client